SigNoz vulnerabilities
8 published CVEs name SigNoz among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-97056
SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass
SigNoz · signoz
High7.6 - CVE-2026-97055
SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret
SigNoz · signoz
Critical9.2 - CVE-2026-93426
SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Names
SigNoz · signoz
High8.4 - CVE-2026-93292
SigNoz 0.88.0 before 0.142.1 - SQL Injection in Trace Funnel Analytics Query Builders
SigNoz · signoz
High8.4 - CVE-2026-92729
SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints
SigNoz · signoz
High8.8 - CVE-2026-63094
SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft
SigNoz · signoz
High7.6 - CVE-2026-57956
SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules
SigNoz · signoz
Medium6.1 - CVE-2026-57955
SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter
SigNoz · signoz
High8.3